NSS Labs - News, Features, and Slideshows

News

• Siemens SCADA hacking talk pulled over security concerns

  A planned presentation on security vulnerabilities in Siemens industrial control systems was pulled Wednesday over worries that the information in the talk was too dangerous to be released.

• Vendors patch firewalls after controversial NSS Labs test

  Four out of the five vendors shown last month by testing company NSS Labs to suffer a security flaw in their high-end firewalls have since patched their products, including two companies that disputed the issue at the time.

• Fortinet unhappy with tests showing firewall flaw

  Security vendor Fortinet has hit back against tests by NSS Labs that showed one of its high-end firewalls along with products from other vendors could be hacked using a 'TCP split handshake attack'.

• Firewall security issue raised in report ignites vendors' ire

  A test by NSS Labs that found firewalls from five vendors are subject in one way or another to remote exploit by hackers has ignited furious response from vendors Fortinet and SonicWall.

• Firewall vendors challenge findings of NSS Labs report

  Apparently, NSS Labs struck a nerve. NSS Labs revealed that almost all of the firewalls it tested for a recent report are susceptible to crash or compromise using common attacks. The firewall vendors in question, though, beg to differ and take exception to the claims made by NSS Labs.

• Hacker 'handshake' hole found in common firewalls

  Some of the most commonly-used firewalls are subject to a hacker exploit that lets an attacker trick a firewall and get into an internal network as a trusted IP connection.

• NSS Labs finds most firewalls vulnerable to attack

  The firewall is the line of defense separating the internal network or endpoint PC from all of the malicious bad stuff "out there". A new report from <a href="http://www.nsslabs.com/">NSS Labs</a>, though, finds that a majority of network firewalls are susceptible to attack or compromise.

• Should you stop using RSA SecurID tokens?

  Anyone using RSA SecurID two-factor authentication tokens for remote access to sensitive information should reconsider using them until RSA, which last week admitted to a major breach of its network, clarifies exactly what was compromised, says NSS Labs.

• Tests find security programs fooled by attack vector

  A new round of antivirus testing found some products fail to detect malware that tries to infect a computer via a different attack vector, such as through a local network fileshare or a USB drive.

• IE blows away rivals in browser security

  A new report from NSS Labs studies how various Web browsers perform when it comes to blocking socially-engineered attacks. The startling results show that Internet Explorer isn't just better than rival browsers like Chrome and Firefox -- but leaves competitors completely in the dust.

• IE9's App Rep bumps browser's anti-malware score to 99%

  Microsoft's Internet Explorer 9 (IE9) blocks more malicious sites and malware than any other browser, including its predecessor IE8, according to a report released Tuesday.

• Anti-virus tests find that reputation really does count

  New reputation-based antivirus systems are doing a better job of blocking malicious software than did their predecessors.